cve.nowby Sazabi

PackagistPackage

kantorge/yaffa

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 1 · 1 medium

Registry: Packagist

Advisories 1

CVE-2025-70844Medium 6.1
yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS).
Affected: through 2.0.0.